3b7e086578585d8855215cd89f574395_JaffaCakes118 | Triage

Sharing

General

Target

3b7e086578585d8855215cd89f574395_JaffaCakes118
Size

150KB
MD5

3b7e086578585d8855215cd89f574395
SHA1

ab1928a69daca0629550acd3e9ac14e725571b41
SHA256

995ba77a23edf035ab3a8d3aa81bc03a2341f2e78c4a798433ab0b09015f91cb
SHA512

6a77fdca7ef3f29fe9ac72ea0ebc5c1d17694cc95795753d0f920bd2b0196c93dc1de7a170aaffa18685e518dd313b75e86be490622c58bad6f120a194baee13
SSDEEP

3072:iO0S5qB27i4i91s9ohzlS0NegAFCCEO9U7D1ErRRrUVWGs92ea4nKBR/ihnZ:900pi91s9Uz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b7e086578585d8855215cd89f574395_JaffaCakes118

Files

3b7e086578585d8855215cd89f574395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\GZK\documents\visual studio 2010\Projects\E09E5DD0524D44504B4CFFABC0\E09E5DD0524D44504B4CFFABC0\obj\x86\Release\E09E5DD0524D44504B4CFFABC0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ